@blockrun/clawrouter 0.12.264 → 0.12.266

package/dist/index.d.ts

@@ -359,6 +359,9 @@ type OpenClawPluginDefinition = {
     };
 };
 
+/** OpenClaw's bundled router owns `clawrouter`; BlockRun must never claim it. */
+declare const BLOCKRUN_PLUGIN_ID = "blockrun-clawrouter";
+
 /**
  * Response Cache for LLM Completions
  *
@@ -617,6 +620,13 @@ type PolicyList = "allowedPayees" | "blockedPayees" | "allowedNetworks" | "allow
 declare const CAIP2_BASE = "eip155:8453";
 /** Solana mainnet genesis, as carried on x402 `selectedRequirements.network`. */
 declare const CAIP2_SOLANA_MAINNET = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d";
+/**
+ * Every network the proxy can pay on, as carried on x402
+ * `selectedRequirements.network`. Single source of truth for surfaces that
+ * validate `allowedNetworks` entries: an entry outside this set can never
+ * match a quote and would only block payments.
+ */
+declare const PAYABLE_NETWORKS: readonly string[];
 /**
  * A policy list on disk is present but unusable. Thrown rather than swallowed:
  * silently dropping a corrupted allow/deny list would widen what the agent may
@@ -694,6 +704,14 @@ interface SpendControlStorage {
      * back to save() when absent.
      */
     saveHistory?(history: SpendRecord[]): void;
+    /**
+     * Optional: persist limits without touching stored history — the mirror of
+     * saveHistory(). A policy edit from a second process (the CLI) must not
+     * write its own stale history snapshot back over spend the proxy recorded
+     * since, which would reopen a rolling window. Falls back to save() when
+     * absent.
+     */
+    saveLimits?(limits: SpendLimits, expect?: SpendLimits): void;
 }
 declare class FileSpendControlStorage implements SpendControlStorage {
     private readonly spendingFile;
@@ -713,6 +731,14 @@ declare class FileSpendControlStorage implements SpendControlStorage {
      * erase an operator's hand-edit to spending.json seconds after they made it.
      */
     saveHistory(history: SpendRecord[]): void;
+    /**
+     * Persist limits while leaving the stored history exactly as it is on disk.
+     * With `expect`, refuse when the stored limits are no longer the ones the
+     * writer read — a stale instance must not replace another writer's edit.
+     * The re-read happens immediately before the atomic rename, so the race
+     * window is the write itself, not the whole command.
+     */
+    saveLimits(limits: SpendLimits, expect?: SpendLimits): void;
 }
 declare class InMemorySpendControlStorage implements SpendControlStorage {
     private data;
@@ -724,6 +750,7 @@ declare class InMemorySpendControlStorage implements SpendControlStorage {
         limits: SpendLimits;
         history: SpendRecord[];
     }): void;
+    saveLimits(limits: SpendLimits, expect?: SpendLimits): void;
 }
 interface SpendControlOptions {
     storage?: SpendControlStorage;
@@ -738,6 +765,8 @@ declare class SpendControl {
     private reservationSeq;
     /** Limits we loaded and have not changed; history-only saves must not clobber operator edits. */
     private limitsDirty;
+    /** The limits this instance last read from or wrote to storage — the compare-and-swap baseline. */
+    private diskLimits;
     /** Set when spending.json held an unusable policy list: refuse every payment. */
     private policyFileBroken?;
     private readonly storage;
@@ -748,6 +777,13 @@ declare class SpendControl {
     setPolicy(list: PolicyList, values: string[]): void;
     clearPolicy(list: PolicyList): void;
     getLimits(): SpendLimits;
+    /**
+     * Why spending.json could not be loaded, or undefined when it is usable.
+     * While set, every setter mutates memory only: save() refuses to rewrite a
+     * file it could not fully parse, so callers must check this before
+     * reporting a change as applied.
+     */
+    getPolicyFileError(): string | undefined;
     check(estimatedCost: number, counterparty?: CounterpartyInfo): CheckResult;
     record(amount: number, metadata?: {
         model?: string;
@@ -1004,6 +1040,12 @@ type ProxyOptions = {
     paymentChain?: PaymentChain;
     /** Port to listen on (default: 8402) */
     port?: number;
+    /**
+     * Reuse a compatible process already listening on the requested port.
+     * Desktop disables this because it must only configure agents against a
+     * process whose lifecycle it owns.
+     */
+    allowExistingProxy?: boolean;
     routingConfig?: Partial<RoutingConfig>;
     /** Request timeout in ms (default: 180000 = 3 minutes). Covers on-chain tx + LLM response. */
     requestTimeoutMs?: number;
@@ -1106,21 +1148,21 @@ type ProxyHandle = {
 declare function startProxy(options: ProxyOptions): Promise<ProxyHandle>;
 
 /**
- * Resolve wallet key: load saved → env var → auto-generate.
- * Also loads mnemonic if available for Solana key derivation.
+ * Resolve wallet key: migrate legacy files → explicit env → Core → legacy → generate.
+ * Also loads Core Solana material or a legacy mnemonic-derived key when available.
  * Called by index.ts before the auth wizard runs.
  */
 type WalletResolution = {
     key: string;
     address: string;
-    source: "saved" | "env" | "config" | "generated";
+    source: "core" | "saved" | "env" | "config" | "generated";
     mnemonic?: string;
     solanaPrivateKeyBytes?: Uint8Array;
 };
 /**
  * Set up Solana wallet for existing EVM-only users.
  * Generates a new mnemonic for Solana key derivation.
- * NEVER touches the existing wallet.key file.
+ * NEVER changes the existing Base wallet.
  */
 declare function setupSolana(): Promise<{
     mnemonic: string;
@@ -1324,6 +1366,9 @@ declare class RequestDeduplicator {
     private prune;
 }
 
+/** Derive the Solana seed at m/44'/501'/0'/0' using SLIP-0010 Ed25519. */
+declare function deriveSolanaKeyBytes(mnemonic: string): Uint8Array;
+
 /**
  * Wallet Key Derivation
  *
@@ -1355,17 +1400,7 @@ declare function deriveEvmKey(mnemonic: string): {
     privateKey: `0x${string}`;
     address: string;
 };
-/**
- * Derive 32-byte Solana private key using SLIP-10 Ed25519 derivation.
- * Path: m/44'/501'/0'/0' (Phantom / Solflare / Backpack compatible)
- *
- * Algorithm (SLIP-0010 for Ed25519):
- *   1. Master: HMAC-SHA512(key="ed25519 seed", data=bip39_seed) → IL=key, IR=chainCode
- *   2. For each hardened child index:
- *      HMAC-SHA512(key=chainCode, data=0x00 || key || ser32(index)) → split again
- *   3. Final IL (32 bytes) = Ed25519 private key seed
- */
-declare function deriveSolanaKeyBytes(mnemonic: string): Uint8Array;
+
 /**
  * Derive both EVM and Solana keys from a single mnemonic.
  */
@@ -1729,6 +1764,7 @@ declare function parseCallArgs(raw: string): {
  * Delegates to the local proxy (which handles x402 payment).
  */
 declare function buildImageGenerationProvider(): ImageGenerationProviderPlugin;
+
 declare const plugin: OpenClawPluginDefinition;
 
-export { type AggregatedStats, BALANCE_THRESHOLDS, BLOCKRUN_MODELS, type BalanceInfo, BalanceMonitor, CAIP2_BASE, CAIP2_SOLANA_MAINNET, type CachedLLMResponse, type CachedResponse, type CheckResult, type CounterpartyInfo, DEFAULT_RETRY_CONFIG, DEFAULT_SESSION_CONFIG, type DailyStats, type DerivedKeys, EmptyWalletError, FileSpendControlStorage, InMemorySpendControlStorage, InsufficientFundsError, type InsufficientFundsInfo, type LowBalanceInfo, MODEL_ALIASES, MalformedSpendPolicyError, OPENCLAW_MODELS, PARTNER_SERVICES, type PartnerServiceDefinition, type PartnerToolDefinition, type PaymentChain, type PolicyList, type ProxyHandle, type ProxyOptions, RequestDeduplicator, ResponseCache, type ResponseCacheConfig, type RetryConfig, RpcError, type SessionConfig, type SessionEntry, SessionStore, type SolanaBalanceInfo, SolanaBalanceMonitor, SpendControl, type SpendControlOptions, type SpendControlStorage, type SpendLimits, SpendPolicyError, type SpendRecord, type SpendWindow, type SpendingStatus, type SufficiencyResult, type UsageEntry, VISIBLE_OPENCLAW_MODELS, type WalletConfig, type WalletResolution, blockrunProvider, buildImageGenerationProvider, buildPartnerTools, buildProviderModels, clearStats, plugin as default, deriveAllKeys, deriveEvmKey, deriveSolanaKeyBytes, fetchWithRetry, formatDuration, formatStatsAscii, generateWalletMnemonic, getAgenticModels, getModelContextWindow, getPartnerService, getProxyPort, getSessionId, getStats, hashRequestContent, injectAuthProfile, injectModelsConfig, isAgenticModel, isBalanceError, isBlockrunWebSearchDisabled, isEmptyWalletError, isInsufficientFundsError, isRetryable, isRpcError, isValidMnemonic, loadPaymentChain, logUsage, parseCallArgs, registerSpendPolicyHook, resolveModelAlias, resolvePaymentChain, savePaymentChain, setupSolana, startProxy, syncAgentModelCache };
+export { type AggregatedStats, BALANCE_THRESHOLDS, BLOCKRUN_MODELS, BLOCKRUN_PLUGIN_ID, type BalanceInfo, BalanceMonitor, CAIP2_BASE, CAIP2_SOLANA_MAINNET, type CachedLLMResponse, type CachedResponse, type CheckResult, type CounterpartyInfo, DEFAULT_RETRY_CONFIG, DEFAULT_SESSION_CONFIG, type DailyStats, type DerivedKeys, EmptyWalletError, FileSpendControlStorage, InMemorySpendControlStorage, InsufficientFundsError, type InsufficientFundsInfo, type LowBalanceInfo, MODEL_ALIASES, MalformedSpendPolicyError, OPENCLAW_MODELS, PARTNER_SERVICES, PAYABLE_NETWORKS, type PartnerServiceDefinition, type PartnerToolDefinition, type PaymentChain, type PolicyList, type ProxyHandle, type ProxyOptions, RequestDeduplicator, ResponseCache, type ResponseCacheConfig, type RetryConfig, RpcError, type SessionConfig, type SessionEntry, SessionStore, type SolanaBalanceInfo, SolanaBalanceMonitor, SpendControl, type SpendControlOptions, type SpendControlStorage, type SpendLimits, SpendPolicyError, type SpendRecord, type SpendWindow, type SpendingStatus, type SufficiencyResult, type UsageEntry, VISIBLE_OPENCLAW_MODELS, type WalletConfig, type WalletResolution, blockrunProvider, buildImageGenerationProvider, buildPartnerTools, buildProviderModels, clearStats, plugin as default, deriveAllKeys, deriveEvmKey, deriveSolanaKeyBytes, fetchWithRetry, formatDuration, formatStatsAscii, generateWalletMnemonic, getAgenticModels, getModelContextWindow, getPartnerService, getProxyPort, getSessionId, getStats, hashRequestContent, injectAuthProfile, injectModelsConfig, isAgenticModel, isBalanceError, isBlockrunWebSearchDisabled, isEmptyWalletError, isInsufficientFundsError, isRetryable, isRpcError, isValidMnemonic, loadPaymentChain, logUsage, parseCallArgs, registerSpendPolicyHook, resolveModelAlias, resolvePaymentChain, savePaymentChain, setupSolana, startProxy, syncAgentModelCache };